$ rpki-client -vvf rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft File: 9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft (raw, json) Hash identifier: /wWPp7Zp4eyM/GoZvxxxGyT1cINxg0h3qTx+oOuSqcU= Subject key identifier: EC:F0:F4:20:A0:4A:4B:8E:79:04:08:51:91:A7:3A:DC:6C:3A:99:B8 Authority key identifier: 9E:5A:74:B4:E1:E6:2D:25:BA:36:E3:E7:A4:40:2D:90:6E:F7:0E:2A Certificate issuer: /CN=9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A Certificate serial: 707AB1B302109A26567C00FCFE1976CC929A36AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:00:46 +0000 Manifest this update: Thu 23 Jul 2026 16:55:46 +0000 Manifest next update: Fri 24 Jul 2026 19:24:46 +0000 Files and hashes: 1: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (hash: lw3Ph+05xOCfBGre0101Mumi0SBmIeVe3yfjhxly5RI=) 2: 9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl (hash: oiOVAb3XPkn7FbxpskGWBAHNA8Y8RYd1Hcef55TMFr4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:7a:b1:b3:02:10:9a:26:56:7c:00:fc:fe:19:76:cc:92:9a:36:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A Validity Not Before: Jul 23 16:55:46 2026 GMT Not After : Jul 24 19:24:46 2026 GMT Subject: CN=ECF0F420A04A4B8E7904085191A73ADC6C3A99B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:99:91:b6:d0:ee:9b:71:54:1d:fe:ca:60:fa: b0:d1:6b:b7:ea:1e:25:76:e2:ee:c3:c0:e3:33:90: 7a:e4:25:6d:70:62:b1:2d:20:f5:e0:60:6f:20:31: 99:c8:09:9e:c9:43:01:e0:d1:1e:b2:0b:eb:1a:62: 71:30:66:92:d5:e9:b0:a4:d4:d9:1c:43:6e:f6:7c: a1:97:0e:4f:be:93:5c:07:a5:46:0a:5d:85:84:15: 61:cb:f1:ba:3e:8a:55:8e:fa:79:7a:0d:6e:86:cd: 68:25:46:70:b9:bf:9f:2b:6d:78:84:d1:60:ab:08: 91:de:ac:87:9e:de:b9:82:5e:c2:ec:c8:98:0a:a0: 2c:d6:2e:58:f2:68:2b:a5:c6:20:9b:a8:db:ca:2a: 0a:f2:61:d8:4a:84:67:4d:56:d3:d2:58:b7:f1:db: 4e:98:87:67:18:93:de:e7:cb:c3:f6:30:fe:97:f7: 9d:c8:8b:8f:ef:58:17:be:7f:db:19:c5:66:86:92: c7:88:a8:1c:35:e0:0e:21:75:f1:32:0f:e9:38:0f: 4a:ef:ed:33:fe:d4:f3:02:f3:f9:8e:35:5c:bf:ed: 30:fd:a5:83:24:d8:55:c1:8d:ae:74:8d:3b:9d:e4: 99:78:04:07:cd:d1:9f:8e:d3:aa:0b:c8:8a:7c:37: 5c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F0:F4:20:A0:4A:4B:8E:79:04:08:51:91:A7:3A:DC:6C:3A:99:B8 X509v3 Authority Key Identifier: keyid:9E:5A:74:B4:E1:E6:2D:25:BA:36:E3:E7:A4:40:2D:90:6E:F7:0E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:8c:05:31:7f:cc:b3:d2:00:5e:02:a0:ba:43:e0:91:38:1a: 89:fa:b1:28:73:78:91:da:a4:19:4c:e1:d5:40:3b:13:49:7b: 8e:55:31:50:9f:72:59:08:08:4c:75:06:b0:af:5c:31:94:f3: 20:a9:7a:35:69:5d:8e:4c:20:dc:83:6e:f5:f2:ac:a8:3e:75: cb:2f:70:77:6b:b6:75:95:da:d7:b3:9c:15:5c:3b:8a:3e:92: dd:93:c3:62:f4:6b:dd:26:43:e9:f5:d8:c2:c7:f2:b5:51:7e: 6c:e0:b9:bc:1c:7f:a9:12:3e:66:46:ad:89:4b:f5:2a:66:52: 04:10:82:96:6e:9b:a2:b7:70:32:66:2b:a0:20:46:dc:c9:e9: 65:dd:1e:e3:b8:f8:61:e8:58:9f:91:a0:d1:28:4b:27:06:a3: 1f:c9:55:f9:da:ce:ef:cf:23:59:59:bc:d1:de:d9:f1:ed:61: b0:11:de:a3:8c:f7:4d:f0:fa:fe:bb:23:d3:f7:1d:34:51:2f: d3:2b:1e:a5:a0:0f:fe:47:39:0f:76:fe:64:3e:29:25:fc:ea: 8f:ad:ed:2e:50:1a:eb:27:87:cc:77:d2:56:c0:73:94:d3:21: a3:0d:b6:43:40:9f:5a:90:9c:7c:d3:22:8a:0c:c2:03:8c:60: b9:9a:93:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcHqxswIQmiZWfAD8/hl2zJKaNq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU1QTc0QjRFMUU2MkQyNUJBMzZFM0U3QTQ0MDJEOTA2 RUY3MEUyQTAeFw0yNjA3MjMxNjU1NDZaFw0yNjA3MjQxOTI0NDZaMDMxMTAvBgNV BAMTKEVDRjBGNDIwQTA0QTRCOEU3OTA0MDg1MTkxQTczQURDNkMzQTk5QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGmZG20O6bcVQd/spg+rDRa7fq HiV24u7DwOMzkHrkJW1wYrEtIPXgYG8gMZnICZ7JQwHg0R6yC+saYnEwZpLV6bCk 1NkcQ272fKGXDk++k1wHpUYKXYWEFWHL8bo+ilWO+nl6DW6GzWglRnC5v58rbXiE 0WCrCJHerIee3rmCXsLsyJgKoCzWLljyaCulxiCbqNvKKgryYdhKhGdNVtPSWLfx 206Yh2cYk97ny8P2MP6X953Ii4/vWBe+f9sZxWaGkseIqBw14A4hdfEyD+k4D0rv 7TP+1PMC8/mONVy/7TD9pYMk2FXBja50jTud5Jl4BAfN0Z+O06oLyIp8N1x9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7PD0IKBKS455BAhRkac63Gw6mbgwHwYDVR0j BBgwFoAUnlp0tOHmLSW6NuPnpEAtkG73DiowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZjMGNkNWQtZDA4NS00ZTJmLWIyMzAtN2I3ZTY2ZDEzOTNmLzAvOUU1QTc0QjRF MUU2MkQyNUJBMzZFM0U3QTQ0MDJEOTA2RUY3MEUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RTVBNzRCNEUxRTYyRDI1QkEzNkUzRTdBNDQwMkQ5MDZFRjcw RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZjMGNkNWQtZDA4NS00ZTJmLWIy MzAtN2I3ZTY2ZDEzOTNmLzAvOUU1QTc0QjRFMUU2MkQyNUJBMzZFM0U3QTQ0MDJE OTA2RUY3MEUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANSMBTF/zLPSAF4CoLpD4JE4Gon6sShzeJHa pBlM4dVAOxNJe45VMVCfclkICEx1BrCvXDGU8yCpejVpXY5MINyDbvXyrKg+dcsv cHdrtnWV2teznBVcO4o+kt2Tw2L0a90mQ+n12MLH8rVRfmzgubwcf6kSPmZGrYlL 9SpmUgQQgpZum6K3cDJmK6AgRtzJ6WXdHuO4+GHoWJ+RoNEoSycGox/JVfnazu/P I1lZvNHe2fHtYbAR3qOM903w+v67I9P3HTRRL9MrHqWgD/5HOQ92/mQ+KSX86o+t 7S5QGusnh8x30lbAc5TTIaMNtkNAn1qQnHzTIooMwgOMYLmakwY= -----END CERTIFICATE-----Generated at Fri Jul 24 05:25:41 2026 by rpki-client